Ranked by Attention Score: stars gained over the last 7 complete days
12 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
LordOS — a free, fast and secure GNU/Linux distribution based on Debian, with its own desktop environment: display server and Wayland compositor in C, a React UI engine on QuickJS, and private native apps.
eBPF-based Security Observability and Runtime Enforcement
lightweight system-level observability for AI Agents
Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64 and arm64.
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
Process-aware, eBPF-based tcpdump
Packet, where are you? -- eBPF-based Linux kernel networking debugger
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
Learning eBPF, published by O'Reilly - out now! Here's where you'll find a VM config for the examples, and more
eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness
ebpfkit is a rootkit powered by eBPF
Red Canary's eBPF Sensor